Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: YLswstGrvIJKWDnNleB3yPO4x1EoatEz0x8iiOP2QIU=
Subject key identifier: B2:97:6A:8C:50:AB:98:89:E3:AB:EA:E7:97:C5:6D:F5:C9:88:A8:39
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 0197CB39EF83B14231DC44916E3F0BD96E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 13:01:00 +0000
Manifest this update: Wed 02 Jul 2025 13:01:00 +0000
Manifest next update: Thu 03 Jul 2025 13:01:00 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: FqHdQVPJZKP4L/R2aGk2nbCgrisVQw6xL8BQDRaue44=)
2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:ef:83:b1:42:31:dc:44:91:6e:3f:0b:d9:6e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Jul 2 13:01:00 2025 GMT
Not After : Jul 3 13:01:00 2025 GMT
Subject: CN=b2976a8c50ab9889e3abeae797c56df5c988a839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:ab:46:46:c3:b3:47:b0:64:b6:91:99:b2:
5f:52:fe:71:61:dc:98:62:49:ec:96:35:e3:51:b2:
c1:ad:0d:f5:82:78:31:6f:ae:7a:e4:49:ea:ec:f8:
8c:64:85:5d:bb:a8:9c:1e:c5:08:af:d5:5d:a4:0b:
62:ff:22:c1:a2:21:58:8e:98:ef:cc:78:a2:66:d2:
27:66:ce:f5:ee:d3:4c:29:b7:4f:ee:7b:52:df:b1:
63:6b:40:1d:f5:94:f1:66:ff:26:b4:1c:08:75:d8:
91:54:41:2e:a9:83:2b:dc:f7:e1:8d:51:87:0e:94:
52:5d:15:c7:bd:89:5f:d4:7f:ef:6c:e2:44:8e:3e:
f9:8a:3f:2e:d2:15:c9:b4:cd:a3:3e:09:fa:a3:4d:
63:ce:e0:31:29:7d:81:ef:25:38:29:d0:f4:86:cd:
db:76:6a:1c:99:fd:a5:71:11:28:65:ae:09:22:08:
fe:db:1f:68:6f:93:9a:9f:65:0e:ba:57:d0:33:65:
7e:c1:b5:86:07:ae:28:1c:d8:ce:db:e0:32:86:98:
91:12:20:ca:b1:21:08:33:b0:a2:05:aa:20:8a:be:
ff:60:70:4a:fe:78:83:a6:96:b3:37:4d:7a:77:e8:
e3:c6:b2:d0:68:7e:6f:0d:af:2c:76:fd:2f:14:d3:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:6A:8C:50:AB:98:89:E3:AB:EA:E7:97:C5:6D:F5:C9:88:A8:39
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:74:54:b3:60:07:3f:89:c7:3f:68:dc:18:b8:18:f6:28:5a:
d9:91:01:49:16:2c:c0:4f:01:9f:63:68:50:17:f0:88:45:5d:
8b:24:70:69:7d:89:b1:d5:9b:26:28:49:ef:b6:a3:0c:af:c4:
a7:3a:45:e4:14:7a:cb:f5:cb:6c:84:a6:ec:fe:39:84:16:07:
ab:6c:f7:6b:4c:ff:12:63:f9:da:98:25:b4:ba:c2:5a:7a:d3:
ae:a1:0d:ff:e7:2c:fe:ae:e2:bc:4a:2d:ae:09:41:80:66:1c:
75:59:05:77:36:3a:3f:dd:0a:73:96:fd:09:47:09:98:d8:3c:
6a:9b:ad:76:c3:2a:44:7b:84:5c:f5:de:17:21:f8:d1:73:c9:
5f:ee:ef:f0:d0:75:50:89:25:6f:6a:a8:7a:c4:3f:c5:e9:f7:
98:8d:16:b4:c6:64:83:99:54:ec:8a:6c:f1:5c:27:16:72:9c:
0e:4a:b8:be:b9:ca:ca:95:8f:97:99:61:40:ca:27:74:28:eb:
cc:e0:9c:8a:10:38:ba:4a:3e:70:52:58:c6:a4:0a:94:d7:4e:
80:93:20:d7:dd:6f:3d:d0:f5:f5:22:58:86:c1:39:45:2c:d3:
db:e0:ba:ba:ab:6e:a6:5e:62:ea:9d:c4:30:99:a8:54:3c:66:
14:2c:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:54:45 2025 by rpki-client